[CLSA-2026:1792204181] sudo: Fix of CVE-2026-96512
Type:
security
Severity:
Important
Release date:
2026-10-17 02:29:52 UTC
Description:
- CVE-2026-96512: unset TZ in sudo's own environment before tzset() in main(), working on a private copy of environ made in os_init_common() so the envp passed to the plugins is left unchanged
CVEs fixed:
Updated packages:
  • sudo-1.9.5p2-10.el9_6.2.tuxcare.els2.aarch64.rpm
    sha:2bdedf618ef12180209e5b356724fc28f05c409c6f50c4afa5556312681ddc2a
  • sudo-1.9.5p2-10.el9_6.2.tuxcare.els2.i686.rpm
    sha:369f32a73605795a87d1a15ba3770f354f20866f485ae1bda7d3fa4b77acf1e1
  • sudo-1.9.5p2-10.el9_6.2.tuxcare.els2.x86_64.rpm
    sha:58ca9bcf464ccf4292c7dda4f4a412de4ef20d2f268a43430ee3217049a48843
  • sudo-devel-1.9.5p2-10.el9_6.2.tuxcare.els2.aarch64.rpm
    sha:8013a2a6a23ca2158817c1a6fb5cd1d9466666cd5a202b61515f8c535e51e795
  • sudo-devel-1.9.5p2-10.el9_6.2.tuxcare.els2.i686.rpm
    sha:37af146723fb57c3c580ee1f4e5f831978fac27900a3e5a7c839032ffe8c7fbe
  • sudo-devel-1.9.5p2-10.el9_6.2.tuxcare.els2.x86_64.rpm
    sha:136a6c35227a99c1693bc743a51a140642ecefd2af208db179a71c86896ff2d5
  • sudo-python-plugin-1.9.5p2-10.el9_6.2.tuxcare.els2.aarch64.rpm
    sha:4e4b2d6b753aaf8e079071b2166499a09f75da974839051da3d05fc1e2039baa
  • sudo-python-plugin-1.9.5p2-10.el9_6.2.tuxcare.els2.i686.rpm
    sha:0a5e849c5a4c7ea17b1208e1eb67ddf690716558ba3c640ad570313d8ed9d672
  • sudo-python-plugin-1.9.5p2-10.el9_6.2.tuxcare.els2.x86_64.rpm
    sha:395e1058237596d358aaeda4d4ee028cb3e39ee7bff22c7b13f8864dd4403322
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.